Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

AlienVault OTX General

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

axios

This update includes the following RPMs:

grafana13.1:
  * grafana13.1-13.1.1-0.5.2.hum1 (aarch64, x86_64)
  * grafana13.1-13.1.1-0.5.2.hum1.src (src)

Security Fix(es):

grafana13.1:
  * CVE-2026-67313
  * CVE-2026-67314
  * CVE-2026-67315
  * CVE-2026-67316
  * CVE-2026-67317
  * CVE-2026-67318
  * CVE-2026-69152
  * CVE-2026-69153
  * CVE-2026-69192
  * CVE-2026-69198

The advisory covers several CVEs affecting the grafana13.1 package in Red Hat Hardened Images, notably CVE-2026-67313, which is a denial of service vulnerability caused by uncontrolled recursion in axios's formDataToJSON function. An attacker can supply FormData with deeply nested bracketed field names, causing stack exhaustion and process termination. The issue is tracked under CWE-674 (Uncontrolled Recursion) and related CWEs. Red Hat has released updated RPMs (grafana13.1-13.1.1-0.5.hum1) for affected architectures. The CVSS v3 score assigned by Red Hat for CVE-2026-67313 is 7.5, indicating a high impact on availability. The advisory does not provide explicit patch links but references Red Hat's image repository for updates. No known exploits in the wild have been reported. The update addresses multiple related CVEs in the same package.

Detailed information about axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nes

axios versions 0.28.0 and later contain uncontrolled recursion in formDataToJSON when processing FormData field names with deeply nested bracket… (CVE-2026-67313) - Live Threat Intelligence - Threat Radar | OffSeq.com

https://access.redhat.com/errata/RHSA-2026:49714

https://access.redhat.com/security/cve/CVE-2026-67313

https://access.redhat.com/security/cve/CVE-2026-67314

https://access.redhat.com/security/cve/CVE-2026-67315

https://access.redhat.com/security/cve/CVE-2026-67316

https://access.redhat.com/security/cve/CVE-2026-67317

https://access.redhat.com/security/cve/CVE-2026-67318

https://access.redhat.com/security/updates/classification/

https://images.redhat.com/

Canonical URL

https://access.redhat.com/errata/RHSA-2026:50826

https://access.redhat.com/security/cve/CVE-2026-69152

https://access.redhat.com/security/cve/CVE-2026-69153

https://access.redhat.com/security/cve/CVE-2026-69192

https://access.redhat.com/security/cve/CVE-2026-69198

Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to bypass upload size limits and cause uncontrolled network egress or resource exhaustion.

Axios versions >=1.7.0 and <1.18.0 fail to enforce the maxBodyLength configuration limit for request bodies provided as WHATWG ReadableStreams in the fetch adapter when the Content-Length header cannot be determined. This flaw enables attackers to supply stream data of unknown length, bypassing upload size limits and potentially leading to resource exhaustion or excessive network usage. The vulnerability is tracked as CVE-2026-67317 and is categorized under CWE-770 (Allocation of Resources Without Limits or Throttling). No known exploits in the wild have been reported. No patch links are provided in the data, so patch status is not confirmed.

Detailed information about axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when C

axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length… (CVE-2026-67317) - Live Threat Intelligence - Threat Radar | OffSeq.com

Node axios: axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length… (CVE-2026-67317)


Red Hat Security Advisory: Red Hat Hardened Images RPMs Security UpdateCVE-2026-67313 0 This update includes the following RPMs: grafana13.1: * grafana13.1-13.1.1-0.5.2.hum1 (aarch64, x86_64) * grafana13.1-13.1.1-0.5.2.hum1.src (src) Security Fix(es): grafana13.1: * CVE-2026-67313 * CVE-2026-67314 * CVE-2026-67315 * CVE-2026-67316 * CVE-2026-67317 * CVE-2026-67318 * CVE-2026-69152 * CVE-2026-69153 * CVE-2026-69192 * CVE-2026-69198 HighVulnerability#gcve #osv #ghsa-fq2j-3j99-rx65 Join the discussion	GCVE Database	08/05/2026, 14:18:29 UTC Added: 08/01/2026, 21:18:12 UTC
Node axios: axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length… (CVE-2026-67317)CVE-2026-67317 0 axios versions 1.7.0 before 1.18.0 fail to enforce maxBodyLength for WHATWG ReadableStream request bodies in the fetch adapter when Content-Length cannot be determined. Attackers can supply unknown-length stream data to bypass upload size limits and cause uncontrolled network egress or resource exhaustion. MediumVulnerability#gcve #osv #ghsa-39j5-w47m-2gmv Join the discussion	GCVE Database	08/01/2026, 13:17:00 UTC Added: 08/01/2026, 21:18:12 UTC

Threats Tagged 'cve-2026-67317'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2026-67317'

Lead Pen Test Professional